Age | Commit message (Expand) | Author |
2019-01-21 | Improve logging for TLS certificate validity checking. | Joel Sing |
2019-01-21 | Explicitly check timegm() return value. | Joel Sing |
2019-01-21 | Perform manual validity checking of the X.509 certificate for constraints. | Joel Sing |
2019-01-20 | Don't use *a - *b as compare idiom, it does not work as expected for | Otto Moerbeek |
2019-01-14 | Prevent multiple ntpds from tripping over each other. | Florian Obser |
2019-01-07 | log dns failures, even if temporary. ok benno | Ted Unangst |
2018-11-29 | update for libtls default cert changes. | Ted Unangst |
2018-11-06 | Use TLS_CA_CERT_FILE instead of a separate define. | Joel Sing |
2018-11-05 | Be stricter with TLS configuration for ntpd constraints. | Joel Sing |
2018-11-01 | - odd condition/test in PF lexer | Alexandr Nedvedicky |
2018-09-07 | Make host_*() AF-agnostic | kn |
2018-08-31 | the main process must chdir to /, since it cannot have daemon() do the | Theo de Raadt |
2018-08-08 | ntpd unveils the cert.pem "r" file (which is passed-over-socket to the | Theo de Raadt |
2018-08-04 | Revert back previous commit, we have decided that socket files don't cause any | Ricardo Mestre |
2018-08-02 | ntpd(8) has logic in place to delete its control socket on shutdown, but it | Ricardo Mestre |
2018-07-19 | revert previous, something isn't quite right as clients see ntpd | Stuart Henderson |
2018-07-12 | if we couldn't update the clock for ~1h due to lack of data from peers and | Henning Brauer |
2018-07-09 | No need to mention which memory allocation entry point failed (malloc, | Kenneth R Westerback |
2018-07-08 | Be consistent in warn() and log_warn() usage when | Kenneth R Westerback |
2017-09-06 | ntpd has been on by default for over two years now, so rework | Jason McIntyre |
2017-08-11 | zero out sockaddr_in before use; fixes use of stack garbage as port number | Christian Weisgerber |
2017-08-10 | naddy@ reported confusion on why "query from" seemed to be ignored in | job |
2017-05-31 | tweak previous; | Jason McIntyre |
2017-05-30 | add option "query from <ip>" to ntpd.conf, to specify a local IP | Sebastian Benoit |
2017-04-17 | don't manipulate hdr.len, it's used internally by libutil now; ok florian@ | Otto Moerbeek |
2017-03-21 | From a syslog perspective it does not make sense to log fatal and | Alexander Bluhm |
2017-03-01 | *nargv[] holds an array of pointers, so it should be | Gleydson Soares |
2017-01-20 | add logging messages to distinguish which safty check failed | Peter Hessler |
2017-01-09 | Stop accessing verbose and debug variables from log.c directly. | Reyk Floeter |
2017-01-09 | Replace hand-rolled for(;;) traversal of ctl_conns TAILQ with | Kenneth R Westerback |
2017-01-08 | Sync log.c with the latest version from vmd/log.c that preserves errno | Reyk Floeter |
2016-12-30 | markup from jan stary; | Jason McIntyre |
2016-12-05 | Use the stack to hold the constraint child process variables instead of | Rafael Zalamena |
2016-12-01 | Remove unused variable which was leaking memory, and while here remove 2 other | Ricardo Mestre |
2016-10-18 | Check for EAGAIN on imsg_flush() return otherwise we might be failing | Rafael Zalamena |
2016-10-18 | Save the constraint process pid by getting the start_child() return value, | Rafael Zalamena |
2016-10-12 | copy updated log.c from vmd: for correctness, save errno when doing | Reyk Floeter |
2016-10-03 | Fix a possible bug that will happen with dup2() when oldd == newd. In that | Rafael Zalamena |
2016-09-26 | Teach ntpd(8) constraint process to use exec*() instead of just forking, | Rafael Zalamena |
2016-09-26 | Teach ntpd(8) how to use socket status to shutdown the daemon. While at | Rafael Zalamena |
2016-09-14 | Teach ntpd(8) how to fork+exec. | Rafael Zalamena |
2016-09-14 | Add clarifications ("comments") to three places where it wasn't | Reyk Floeter |
2016-09-14 | Fix copyright disclaimer in util.c. | Reyk Floeter |
2016-09-03 | Remove the oh so funny "LOSS OF MIND" from the diclaimer that was not | Reyk Floeter |
2016-08-27 | Pull in <sys/time.h> for struct timespec, timeval, or clockrate | Philip Guenther |
2016-07-13 | Adjust existing tls_config_set_cipher() callers for TLS cipher group | Joel Sing |
2016-06-01 | ntpd is too aggressive about retrying constraint connections. This | Theo de Raadt |
2016-05-21 | Harden TLS for ntpd constraints - stop disabling server name verification, | Joel Sing |
2016-05-06 | Unconfuse things by renaming variables to match their contents. | Joel Sing |
2016-05-02 | prepare userland for removing chroot(2) from allowed syscalls under pledge(2). | Sebastien Marie |